If they offered just normal global addressing + firewalling, most of this complexity would just go away.
We easily forget what the internet at the IP level is about and what problems its end-to-end architecture solves.
AWS instructed "Well-Architected (TM)" networking is really just profitable cargo cult thinking leading to complexity, mazes of 10.x networks all alike peppered by address conflicts, kludgey proxies etc when you try to get them to talk to each other, less actual security (complexity is the enemy of security), and vendor lock-in.
We easily forget what the internet at the IP level is about and what problems its end-to-end architecture solves.
AWS instructed "Well-Architected (TM)" networking is really just profitable cargo cult thinking leading to complexity, mazes of 10.x networks all alike peppered by address conflicts, kludgey proxies etc when you try to get them to talk to each other, less actual security (complexity is the enemy of security), and vendor lock-in.